Muri Link Tracker -- WordPress 插件

开发者	muri3
更新时间	2026年11月7日 23:43
PHP版本:	8.2 及以上
WordPress版本:	7.1
版权:	GPLv2 or later
版权网址:	版权信息

Muri Link Tracker is a powerful WordPress plugin designed to help site owners maintain their SEO health and user experience by identifying broken links, analyzing redirect chains, and detecting affiliate patterns — with background jobs and configurable resource limits. Muri Link Tracker scans links in the background and provides a dashboard for broken URLs, redirect loops and missing rel attributes. Throughput depends on your server, the size of the inventory and destination response times. Key Features

Background Processing — Scans run silently via Action Scheduler, so your admin stays responsive and your front-end stays fast.
Three Scan Modes — Launch a Full Scan of all content, a Delta Scan (only posts modified since the last scan) to save resources, or a Reset Data to wipe and start fresh.
Live Progress Tracking — Watch the scan progress in real time with a progress bar, counters, and the ability to cancel mid-scan.
Affiliate Link Detection — Automatically identifies affiliate links across 14+ networks (Amazon, Awin, CJ, ShareASale, Impact, Rakuten, ClickBank, PartnerStack, and more), including URL patterns commonly used for internal affiliate redirects.
Redirect Chain Analysis — Classifies every redirect as a single hop, a chain of 2+ hops, or a loop, so you know exactly what to fix first.
Destination Health — Finds the links that still return 200 but no longer lead anywhere good: a domain that expired, one that changed hands and now serves casino or spam content, or a URL that quietly landed on a parking page. Shows you what it observed — the domain it lands on now, the page title it read, the anchor it was compared against — and leaves the decision to you. Computed entirely on your own server.
Affiliate Networks Breakdown — See at a glance how many links belong to each affiliate program (Amazon, CJ, Awin…).
Modern React Dashboard — Real-time statistics, quick filter tabs (All / Broken / Redirects / OK / Pending), inline editing, and bulk actions in a polished admin interface built with the WordPress design system.
Smart Filtering & Search — Filter by status, link type, or affiliate network, and search across URLs and anchor text instantly.
CSV Export — Export your full link inventory with active filters applied, perfect for reporting and auditing.
Silent Link Editing — Fix or remove a link directly from the dashboard without bumping the post's modified date, with native revisions where enabled.
Configurable Resource Limits — Adjustable batch sizes, timeouts, request delays, and recheck intervals to fit shared hosting or dedicated servers.
Scan Resume — Interrupted scans pick up exactly where they left off.
Gutenberg-Aware — Extracts links from Gutenberg blocks with block-level metadata, including button blocks and navigation links.

What It Detects

Broken links (4xx and 5xx HTTP status codes)
Redirect chains and loops (single hop, multi-hop, infinite loops)
Affiliate links via domain patterns, URL paths, query parameters, and rel="sponsored"
Cloaked affiliate links (internal URLs that redirect to external affiliates)
Missing rel attributes (nofollow, sponsored, ugc)
Dead domains that no longer resolve, told apart from mere timeouts
Destinations that changed hands: cross-domain redirects, parking and for-sale pages, pages whose identity changed since you linked them
Timeout and SSL/connection errors
Both internal and external links, categorized automatically

Privacy Muri Link Tracker makes outbound HTTP requests to verify the status of links found in your content, and — when destination health is enabled — to read the title of the pages those links lead to. These requests use a clearly identified User-Agent string of the form Mozilla/5.0 (compatible; MuriLinkTracker/{version}; +https://your-site-url). It carries the installed plugin version and your own site's address, so the remote servers being checked can identify the source of the request. No third-party service is involved at any point. The plugin has no account, no API key and no cloud component: every check and every verdict is computed on your own server, and the only hosts contacted are the destinations your own content already links to. No personal user data is collected, stored, or transmitted to third parties. Development The release includes the matching React/JavaScript sources in admin/src/, along with package.json and package-lock.json. To rebuild the interface, run npm ci and npm run build from the plugin directory. Project development is also hosted on GitHub: https://github.com/nicolasdiolez/muri-link-tracker

2.3.3

Security: external checks now refuse every address that is not globally reachable, including CGNAT (100.64.0.0/10), 192.0.0.0/24, benchmarking (198.18.0.0/15), documentation and multicast ranges. NAT64 (64:ff9b::/96) and 6to4 (2002::/16) addresses are judged on the IPv4 address they carry.
Security: external checks only connect to ports 80 and 443. Sites that link to public servers on other ports can extend the list with the mltr/scanner/allowed_ports filter.
Security: only http(s) and relative links are indexed. javascript: and data: URLs written in block attributes (button, image, file, cover…) are now ignored, as they already were in HTML, whatever their spelling, and the admin no longer renders a non-web URL as a clickable link.
Change: links using other schemes (ftp:, sms:…) are no longer listed in the inventory; the checker already skipped them.
The review request is shown to administrators only.
Tested with WordPress 7.1.

2.3.2

Require a restorable native revision before content edits; support content and excerpts atomically.
Fail closed when transactional table verification is incomplete.
Share one HTTP timeout budget across redirects and HEAD-to-GET fallback, retaining DNS pinning and body caps.
Refresh worker state across processes and include the delta scan boundary second.
Preserve inventory filters across tabs and keep failed edits/deletions visible for retry.

2.3.1

Cap the response body kept in memory for every external check, including HEAD requests that a server answers with a 303 redirect (previously followed as an uncapped GET).

2.3.0

Preserve images, Gutenberg markup and existing rel values when editing links.
Detect concurrent article edits; keep revisions and reconcile URL collisions transactionally.
Keep scan state durably, support bounded retries, and complete scans without dashboard polling.
Correct Requests limits and pin validated public IPs for external HTTP checks (PHP cURL required).
Distinguish unverified internal URLs, apply URL exclusions and explicit custom-field keys.
Store page reputation evidence per URL with a stable baseline and shared probe budget.
Stream CSV/JSON exports, include all active filters and retain REST errors.
Update dependencies and rebuild release tooling in isolated staging.

2.2.0

New (Destination health): the scanner now reports links whose destination went bad — the domain expired, the site changed hands, or the URL now lands on a parking page or unrelated content. A 200 OK is no longer treated as proof a link is still good.
New (Links table): Risk column and filter — Suspect / Worth a look / No issue found / Not assessed. Opening a link shows exactly what was observed: where it lands now, the page title that was read there, and the anchor text it was compared against. You decide what to do; the plugin never edits or removes a link on its own.
New (Status): dead domains are no longer lumped in with timeouts and 5xx errors. A host that does not resolve gets its own "Domain not found" status and quick filter, confirmed by an actual DNS lookup so a resolver hiccup cannot mislabel your whole inventory.
New (Trust): mark a domain as trusted and it stops being flagged everywhere at once — decisions are recorded per domain, not per link, so a partner linked forty times is judged once.
New (Dashboard): "Destination health" summary, shown only once links have actually been assessed.
New (Export): final_domain, risk_level and risk_flags columns, included in the AI Analysis preset.
New (REST): risk, risk_flag and final_domain filters on /links and /links/export; byRisk counts in GET /links/stats; GET|PUT /reputation/domains and POST /reputation/links/{id}/probe.
New (Settings): "Destination health" section — switch the pass off entirely, or cap how many destinations are fetched per run on constrained hosting.
Privacy: everything is computed on your own server. No third-party API, no account, no key, nothing sent anywhere. The only requests made are to the destinations your own content already links to.
Performance: the assessment runs in its own background pass after a scan, never inside it, so scan duration is unchanged. Signals that need no page fetch run on data already stored; only flagged candidates trigger a fetch, and fetches are pooled per domain — forty links to the same site cost one request.
Extensibility: mltr/reputation/signals, signal_weights, thresholds, parking_signatures, spam_terms, stop_words, compound_suffixes and should_probe filters, plus a mltr/reputation/assessed action.
Database: new mltr_domains table and four columns on mltr_links. Upgrades apply automatically on the next admin page load; a one-off background pass backfills existing links so the feature has something to say about your back catalogue immediately.

2.1.0

New (Localization): the plugin now ships with complete French, Spanish, German and Italian translations — covering both the PHP layer and the React admin app. The interface follows your site language automatically.
New (i18n tooling): reproducible translation pipeline — composer run make-pot regenerates the template and composer run make-json builds the React (JS) catalogs from the .po files, consolidated to the single admin bundle WordPress actually loads.
i18n: regenerated the .pot template (259 strings) with the full v2.0 affiliate / rel / export / FTC UI strings.
Note: technical SEO tokens (nofollow, sponsored, ugc, dofollow) and affiliate network names are intentionally left untranslated for cross-language consistency.
Hardening: a third-party callback hooked on mltr/check/link_checked that throws can no longer abort the scan batch or overwrite the link status that was just saved — the notification is now isolated from the persistence step.
Hardening: when WP_DEBUG is on, unexpected per-link failures during a check are logged with their full origin (file:line + stack trace) to ease diagnosis.
No database changes. Drop-in update from 2.0.0.

2.0.0

New (Affiliates): dedicated Affiliates tab with at-a-glance stats, prioritized action list (broken / missing rel="sponsored" / missing FTC disclosure), and per-network breakdown. Each card pre-filters the Links tab on click.
New (Affiliates): bulk add rel="sponsored" with dry-run preview — see exactly which URLs will be patched before confirming. Edits the live post_content silently (no revision, no post_modified change).
New (External links): bulk add rel="nofollow" for external links, symmetric to the sponsored flow. Dry-run preview + silent post update + sample list of patched URLs.
New (Links table): dedicated Rel column with NF / SP / UGC / DF badges aggregated per link, plus DataViews filter with positive (Has rel="nofollow") and negative (Missing rel="nofollow", Missing rel="sponsored") options — easily spot links you forgot to annotate.
New (Bulk rel): "Add rel=sponsored" / "Add rel=nofollow" now apply to every link you explicitly select, even ones auto-detection did not flag as affiliate or external — so you can override a missed classification. The automated "Fix all missing rel" flows still target only detected affiliate/external links.
Fix (Edit Link): manually editing a link's Rel attribute now updates the plugin's Rel column and filters immediately, instead of staying stale until the next scan (the post content was always updated correctly; only the in-plugin index lagged).
New (REST): rel_missing query param on /links and /links/export (nofollow|sponsored|ugc). New endpoint GET /links/externals/missing-nofollow returns IDs of external links lacking rel="nofollow". GET /links/stats exposes a new externalsMissingNofollow counter.
New (Affiliates): FTC disclosure alert — flags posts with N or more affiliate links missing any of the configured disclosure phrases (e.g. "As an Amazon Associate I earn from qualifying purchases"). Cache invalidated on scan complete.
New (Edit Link): SelectControl to open links in a new tab (target="_blank"). Automatically adds noopener noreferrer to the rel for security and Google compliance.
New (Multilingual): Polylang and WPML adapter pattern. /links and /links/export accept a language filter. New GET /languages endpoint. Filter chip in the Links table appears only when a multilingual plugin is active.
New (Filters): Errors (401, 403, 5xx, network/SSL) and Timeout quick-filter buttons in the Links toolbar — these statuses were previously buried in "All".
New (Export): rebuilt export modal — choose CSV or JSON, pick exact columns, apply date range, and select between Full / AI Analysis / Minimal presets.
New (Export): JSON export endpoint suitable for LLM ingestion — camelCase keys, decoded redirectChain, ISO 8601 datetimes, envelope with version and exported count.
New (Export): 17 available export columns including created_at, languages and a decoded redirect_chain.
New (REST): /links and /links/export now accept created_at_from/to, last_checked_from/to ISO 8601 ranges, language and affiliate_network filters. New GET /links/stats adds affiliateMissingSponsored counter and affiliate_broken_count in byCategory.
New (Admin notice): SchemaNotice detects when a v1.x → v2.0 upgrade left the mltr_instances table without the new post_language column and offers a one-click "Retry migration" button. Prevents silent data loss on rescan.
UX: in Settings, list-like fields (post types, excluded URLs, FTC disclosure phrases) now preserve spaces and trailing newlines while typing — parsing happens only on Save.
UX: clearable banner above the Links table when navigation from the Affiliates tab applied a filter ("Show all links" resets to full inventory).
Security: requested export columns are whitelisted against the schema — unknown column names are silently dropped. Bulk endpoint max-items raised to 500 to support the "Fix all rel=sponsored" flow.
Security (SSRF): the link checker now re-validates every redirect hop and blocks redirects to private, loopback, link-local, or IPv6 unique-local addresses — including AAAA-only hosts and the cloud metadata endpoint — closing a gap where a public URL could redirect inward.
Reliability: the recurring stale-link recheck and weekly orphan cleanup are now actually scheduled on activation (previously wired up but never registered, so both ran as no-ops).
Internationalization: PHP and React admin translations now load from the bundled /languages catalogs (the text domain and script translations were not being registered).
Performance: link checking scales to very large inventories without exhausting memory — pending and stale work is now queued by ID instead of materializing every link object — and a new composite (status_category, last_checked) index speeds up the pending lookup.
Robustness: a single post that fatally crashes the scan worker (e.g. an out-of-memory parse) is now skipped after a few attempts instead of making Action Scheduler retry the same batch forever.
UX: "Fix all" bulk actions are chunked under the 500-id REST cap so they complete on large sites; failed link loads now surface an error notice instead of an indistinguishable empty table; dates in the Links table are localized to the site locale.
Backwards compatible: integrations calling /links/export without format or columns continue to receive the same CSV as v1.1.0. PUT /links/{id} without target keeps the attribute as-is.

1.1.0

Tested with WordPress 7.0 (new "Modern" admin theme palette supported).
Security: stricter URL scheme allowlist and DNS resolution cache to reduce DNS rebinding TOCTOU window during HTTP checks.
Security: hardened REST validation on PUT /links/{id} (URL validated via wp_http_validate_url(), rel filtered against the allowed token list).
Security: rate-limit added on CSV export endpoint (HTTP 429 if triggered more than once per 30 seconds).
Performance: link and instance bulk inserts now use multi-VALUES batched statements (~90% I/O reduction on large scans).
Performance: new composite index (post_id, link_id) on the instances table; existing installs get it automatically on next admin page load (no re-activation needed).
Performance: cross-request lock on the in-poll Action Scheduler queue runner to avoid duplicate work when the dashboard is open in multiple tabs.
UX: empty-state messaging on the Dashboard and Links table before the first scan.
UX: bulk delete now asks for confirmation showing the count of links to remove.
UX: scan-status polling backs off exponentially when the backend is unreachable instead of hammering the API.
UX: completion message uses proper pluralization.
UX: per-network affiliate labels (Amazon, ShareASale, CJ, etc.) are now internationalized.
Accessibility: improved heading structure in the Dashboard, ARIA group on the quick filter bar, focus management in the Edit Link modal, and live-region announcements for snackbar notifications.
Theming: admin styles now use CSS custom properties that pick up the active WordPress admin palette tokens.

1.0.0

Initial release.
Background link scanning via Action Scheduler with resume capability.
Three scan modes: Full Scan, Delta Scan (modified posts only), and Reset Data.
Parallel HTTP checking with HEAD/GET fallback.
Affiliate link detection for 14+ networks, including cloaked internal redirects.
Redirect chain and loop detection (single, chains of 2+, loops).
Per-affiliate-network breakdown in the Dashboard.
Modern React admin dashboard with real-time scan progress and cancel control.
Link table with quick filter tabs (All / Broken / Redirects / OK / Pending), search, advanced filters, pagination, and bulk actions.
Inline link editing with URL and rel attribute updates — silent (no post_modified bump, no revision).
CSV export with active filters.
Scan resume after interruption.
Configurable post types, batch sizes, timeouts, request delays, and recheck intervals.
Full internationalization support (i18n ready).

Muri Link Tracker

标签

下载

详情介绍:

安装:

屏幕截图:

升级注意事项:

常见问题:

更新日志: